Snort mailing list archives

Daily Snort Report is empty, but snort logs and MySQL are full?


From: Aaron The Young <acyoung () nysernet org>
Date: Mon, 20 Jan 2003 11:51:55 -0500



Hello,

I did the Security Focus installation of Snort with an Acid console
on Debian and have been using it for about 3 weeks now.  I love what
acid does for me and I also pull a daily report using a daily report
perl script that was posted here, but.....the default cron report
that was established during the debian installation is empty each
time it is mailed each day.

It's format is a little different so I'd like to see it working.  The
entire report is empty <here is a snipet>

----------------------------------
The log begins from:   ::
The log ends     at:   ::
Total events: 0
Signatures recorded: 0
Source IP recorded: 0
Destination IP recorded: 0
----------------------------------

My /var/log/snort/portscan and snort-<data@time> logs are full of data,
so I'm wondering what might be the problem?

Aaron
  ~

Aaron C. Young, MS
Manager, Internal Technologies
NYSERNet, Inc.
100 Elwood Davis Road
Syracuse, New York 13212-4312
(315) 413-0345 x5555


-------------------------------------------------------
This SF.NET email is sponsored by: FREE  SSL Guide from Thawte
are you planning your Web Server Security? Click here to get a FREE
Thawte SSL guide and find the answers to all your  SSL security issues.
http://ads.sourceforge.net/cgi-bin/redirect.pl?thaw0026en
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: